General

  • Target

    349d7550b23a5c3051faa6981cbead3f_JaffaCakes118

  • Size

    541KB

  • MD5

    349d7550b23a5c3051faa6981cbead3f

  • SHA1

    3f9c5bcad2f590360be7896ba0041e47b4557f6b

  • SHA256

    ca689501b79de8430f0900c86e9a6b5c93b2d7cc68bc0b8921bb6ebb005f6893

  • SHA512

    0371c22293785d230748d59b327e9e155d89255b6b2b85f9840279fb7c75f6ef12809d6d816786bbfe5946d0ce69ec581681a9fec4a2d141db1d72fc84b131b4

  • SSDEEP

    12288:syh6wa8oBGf6J49nHwaLHjYWvluPL7R98NNNae8x3/:syh6x1ci4O4HUAQPH8Nae8

Score
10/10

Malware Config

Extracted

Family

vidar

Version

37.1

Botnet

517

C2

http://tracker99.com/

Attributes
  • profile_id

    517

Signatures

  • Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 349d7550b23a5c3051faa6981cbead3f_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    f54cc0304d2cd0172929148ae0ee0bf6


    Headers

    Imports

    Sections